Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/21b62ae6-bfbd-37b5-b64a-746d79d573fa.roa
File:                     21b62ae6-bfbd-37b5-b64a-746d79d573fa.roa (raw, json)
Hash identifier:          R69bY1oqi44nCnwcE9YBEfcghdtZNkm5FcyGUYwbakY=
Subject key identifier:   8C:C1:F2:33:F8:7F:30:7A:1A:B8:45:F3:CC:77:52:BA:68:1F:E7:32
Certificate issuer:       /CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5
Certificate serial:       010D0C9F4328584D3946030D1EFDF82BF02A4390
Authority key identifier: 58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/21b62ae6-bfbd-37b5-b64a-746d79d573fa.roa
Signing time:             Thu 19 Mar 2026 20:23:17 +0000
ROA not before:           Thu 19 Mar 2026 20:23:17 +0000
ROA not after:            Wed 17 Jun 2026 20:23:17 +0000
asID:                     30437
IP address blocks:        165.156.28.0/24 maxlen: 24
                          165.156.46.0/24 maxlen: 24
                          165.156.47.0/24 maxlen: 24
                          165.156.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:46:03:0d:1e:fd:f8:2b:f0:2a:43:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5
        Validity
            Not Before: Mar 19 20:23:17 2026 GMT
            Not After : Jun 17 20:23:17 2026 GMT
        Subject: CN=091956dd-627c-4ed4-adc6-d4358d88d632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:88:4f:93:75:ed:38:e4:e2:99:ce:b6:da:
                    31:ae:6d:11:14:d1:b9:d6:8f:ce:63:bc:69:98:9f:
                    c0:2a:2b:cc:58:6f:97:c5:dd:dc:29:2d:e6:01:d8:
                    8d:9c:4f:7b:1c:dd:c8:2c:dc:30:0d:fb:2e:22:f3:
                    15:3c:34:aa:d0:97:61:a0:55:fd:7d:e1:25:08:bf:
                    db:f7:64:e9:0b:ae:93:0a:b4:61:71:a3:e1:e9:28:
                    fa:60:a5:48:84:c4:64:07:ea:dd:3e:6e:8d:ae:c0:
                    e0:cc:67:dc:35:0a:2d:3b:95:70:5e:b1:a8:83:79:
                    9e:8f:49:1f:18:60:62:55:0d:0b:c9:0a:36:12:bb:
                    5a:4a:29:ff:fe:3f:f7:72:91:b8:c7:86:7a:2e:db:
                    e5:2e:fa:f6:69:0c:28:c1:c6:c5:9a:89:38:6f:31:
                    4e:a8:bf:27:10:3c:b2:d4:a9:42:b6:21:a9:ff:0b:
                    45:92:56:95:6b:ad:39:fc:b8:31:6f:ea:dd:1b:f9:
                    90:9f:1a:ab:a7:06:93:53:f4:b1:cd:5f:f9:34:f4:
                    ee:cd:a9:9b:75:5b:f4:77:ec:2e:2d:02:95:d0:80:
                    25:96:c2:bf:5a:2f:9c:8d:18:80:72:8b:72:fc:b4:
                    7c:01:24:21:e6:ae:12:9c:3f:48:fa:d7:eb:7d:79:
                    b1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C1:F2:33:F8:7F:30:7A:1A:B8:45:F3:CC:77:52:BA:68:1F:E7:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/21b62ae6-bfbd-37b5-b64a-746d79d573fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl

            X509v3 Authority Key Identifier:
                keyid:58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.156.28.0/24
                  165.156.46.0/23
                  165.156.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a5:d7:21:70:96:e6:b9:71:85:d8:ec:be:fc:b1:fe:6b:66:
         81:3f:be:65:37:95:05:2e:8a:fc:29:61:b5:e8:81:8c:c3:e1:
         7a:b6:36:9e:24:e3:a3:4c:a6:e3:d0:69:e6:ae:aa:2a:49:9b:
         db:db:33:0b:ca:ed:e6:50:a5:5a:24:65:a5:0d:27:8c:4a:e5:
         06:62:0e:1f:bf:8c:0c:f0:2e:a0:5f:53:e1:fe:38:f1:03:c4:
         dc:a7:be:cb:f3:28:4b:7d:3c:80:d1:32:43:0a:ff:88:dc:d1:
         51:75:92:eb:6a:9f:e1:cf:11:8a:6b:1d:df:1e:4e:56:ac:fe:
         99:6a:2e:07:a0:a3:ff:61:28:cd:ac:5b:2e:b6:3c:83:6e:1a:
         5d:75:2d:de:9d:6a:31:f8:0e:bc:c1:8e:de:75:27:e5:e2:02:
         e4:5a:06:c4:15:5b:41:87:3c:dc:f7:6e:ec:f9:02:e0:fe:7a:
         70:ce:8f:b8:8a:63:6f:dd:3f:a8:bb:18:1f:be:c9:d1:78:03:
         b0:f5:d2:a5:37:7f:ef:55:1c:55:cd:a2:52:2f:6b:dd:43:0b:
         22:f6:67:8d:66:b5:76:88:c0:b0:8c:f6:c9:5d:a5:6d:9d:7d:
         22:b4:7e:9f:9a:b7:3c:f1:27:3c:d9:b5:7b:54:59:b4:0c:fa:
         cb:9b:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:17 2026 by rpki-client